This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File:                     f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier:          9wcoDLVmiHINqKOrmcUeDMFCfpk400W1NNeHCHL6qrI=
Subject key identifier:   9B:2F:BA:1C:27:35:A0:B1:D7:93:A2:E3:28:97:28:E3:4E:B3:B7:C6
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer:       /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial:       09EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number:          09E2
Signing time:             Sat 06 Dec 2025 19:08:04 +0000
Manifest this update:     Sat 06 Dec 2025 19:08:04 +0000
Manifest next update:     Sat 13 Dec 2025 19:08:04 +0000
Files and hashes:         1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: EfRqfIVyV+Sa9o8Etf0c714Xhnr03IRKluA85hyWUJ8=)
                          2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: 0mkhd4eAuT9/naCzlV+KcaUe14bdcrlkm0xwSgwQ4wY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
        Validity
            Not Before: Dec  6 19:08:04 2025 GMT
            Not After : Dec 13 19:08:04 2025 GMT
        Subject: CN=69347f14-ecb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:df:66:cd:95:f5:32:53:32:92:c9:cb:2e:
                    0a:d0:01:7f:45:b2:bd:ab:7b:50:80:8c:5c:46:c7:
                    b2:1d:5c:58:32:66:68:1a:a3:96:ed:5f:dc:54:3d:
                    ca:22:3b:c1:b9:d3:30:eb:3c:7f:37:9b:0b:4c:4a:
                    53:6a:f5:c8:d7:a4:c4:6e:cc:c8:b2:01:36:d5:f2:
                    a6:16:d9:29:13:b0:5c:a9:d8:77:2c:cd:43:4f:3b:
                    a2:6f:c7:b7:cf:0a:35:9a:4a:68:2c:c1:8e:08:ab:
                    da:77:87:8c:1c:0b:b0:49:4d:ef:32:0a:a5:66:75:
                    a1:22:04:cc:58:d4:5d:a0:ee:c0:51:97:51:fb:8f:
                    5d:4a:92:bd:07:de:b0:37:9d:48:d2:11:e9:95:13:
                    4c:ff:c5:94:67:cf:12:14:5a:20:72:fa:64:8e:e9:
                    af:fe:43:44:ff:3b:e6:41:af:6f:21:b9:ee:c7:ba:
                    92:fa:00:6a:54:2b:b6:97:c1:f8:6c:29:0e:58:01:
                    e2:38:02:19:73:69:17:56:9e:03:2d:14:9d:de:99:
                    aa:15:2e:ed:f1:89:30:09:a0:52:ea:4d:b2:99:47:
                    55:1a:61:37:b6:f6:7d:86:ee:6a:2f:d5:35:3e:b8:
                    f1:5a:80:18:72:db:94:83:bb:21:c8:61:63:b3:a0:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:BA:1C:27:35:A0:B1:D7:93:A2:E3:28:97:28:E3:4E:B3:B7:C6
            X509v3 Authority Key Identifier:
                keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:06:c3:74:12:7a:a5:34:a0:0a:de:22:a6:82:99:ad:35:69:
         de:d6:af:39:7f:4b:05:1a:f5:dd:68:d8:a0:4e:e7:23:9d:5d:
         b3:ef:2f:4c:bf:70:c9:0a:89:59:d2:d7:61:56:db:98:42:7e:
         ef:4b:b6:89:a2:9d:cc:a4:1f:82:f5:58:19:7e:eb:6f:26:f3:
         af:dd:d1:79:86:c5:c9:7a:85:ba:bc:8c:0f:9c:bc:be:48:35:
         cf:57:74:ee:74:74:85:94:11:cb:f2:20:37:19:23:ff:68:1b:
         3e:6b:c4:8e:4f:73:42:77:eb:fd:8c:9e:4b:77:f9:87:d6:62:
         eb:2e:d9:ea:88:83:68:0a:a4:3c:ae:1f:bc:7e:cb:4e:e9:30:
         57:29:fd:e8:78:3c:6a:95:e3:75:5d:c1:61:79:52:61:c2:12:
         84:4e:bd:57:64:88:51:67:51:2d:f1:78:13:fb:c9:49:87:30:
         1a:80:5e:b5:7f:b0:c8:9b:07:21:4f:a4:fc:ce:20:e6:a0:88:
         ce:c2:2d:71:00:82:93:59:9b:5f:88:0b:51:b2:4d:63:b7:29:
         b0:b5:70:7e:39:a5:8b:fd:8e:9f:84:67:12:39:58:20:b3:e7:
         cf:db:0f:0d:ac:16:b8:58:97:e0:3b:eb:3e:8b:aa:31:65:de:
         ad:d8:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:47:38 2025 by rpki-client